externalize login screen routes
move route/util.authenticate to app_context.authenticate
renamed 'app_context.js' to 'app-context.js'